I really wish https://news.ycombinator.com/user?id=nickpsecurity https://news.ycombinator.com/user?id=nickpsecurity was still around here to throw his weight in

I really wish https://news.ycombinator.com/user?id=nickpsecurity https://news.ycombinator.com/user?id=nickpsecurity was still around here to throw his weight in this thread. He'd often geek out in those kinds of discussions, talking how in the '70s people were actually doing security in computing, vs. the current security theatre, and how many things are totally possible to do, just no big company wants to do this now (even though loudly claiming otherwise), because it is expensive, and it's more profitable to focus on profits than security. For some technical references from Nick, see e.g.: https://news.ycombinator.com/item?id=20946537 https://news.ycombinator.com/item?id=20946537 For example, quoting verbatim from the link above: > [...] Modern OS's, routers, basic apps, etc aren't as secure as software designed in 1960's-1980's. People are defining secure as mitigates some specific things hackers are doing (they'll do something else) instead of properties the systems must maintain in all executions on all inputs. We have tools and development methods to do this but they're just not applied in general. Some still do, like INTEGRITY-178B and Muen Separation Kernel. [...]